Your browser was unable to load all of the resources. They may have been blocked by your firewall, proxy or browser configuration.
Press Ctrl+F5 or Ctrl+Shift+R to have your browser try again.

Issue with build request via API #4684

hung ·

Hello Mr. Robin Shen and Mr. Steve Luo,

We are encountering an issue when a user requests a build via the API. The XML file contains variables that the user does not have permission to modify.
Do you have any suggestions for handling this situation?

Thank you.

  • replies 3
  • views 72
  • stars 0
robinshen ADMIN ·

Do you mean that restful api is able to specify variable values but the variables are not set to prompted from web UI?

hung ·

User used /rest/builds/build_id to get build variables then use the result to submit a build request via the API
Consequently, they can modify not prompted variables in api request.
To address this, we propose adding a configuration option in general setting or a similar option in another page to define which variables are accessible via GET requests and suitable in POST requests.

robinshen ADMIN ·